TEST METHOD FOR MESSAGE PATHS IN COMMUNICATIONS NETWORKS AND 
REDUNDANT NETWORK ARRANGEMENTS 



[0001] This application claims priority to European Application No. 02019298.5, filed 

August 28, 2002, United States Provisional Application No. 60/406,309, filed August 28, 2002, 
and United States Provisional Application No. 60/429,3 13, filed November 27, 2002, the 
contents of which are hereby incorporated by reference. 

Field of the Invention 

[0002] Disclosed are Test methods for message paths in communication networks and 

network elements. Also disclosed are redundant network arrangements. 

Background 

[0003] Highly reliable communications systems often use redundant message paths to 

ensure that a fault affecting an individual message path does not lead to restrictions in 
communication. At the same time the redundancy of the message paths, i.e. for each message 
path there exists at least one alternate message path to which communication can be switched in 
the event of a fault, must be supported by the service platforms or hosts as well as by the 
communications system itself, i.e. by its elements, e.g. switches and routers, and its structure. 

[0004] Moreover, for communications systems with real-time requirements, for example 

in the case of voice communication, very fast switchover times from a faulty message path to an 
alternate message path are also very important in order to limit to a minimum the negative effects 
on operation in the event of failure of a message path. 

[0005] Faults to be taken into account include total failures and/or partial failures in 

individual elements of the communications system, e.g. service platform, switches, routers, and 
failures of the connections between the individual elements. 

[0006] A communications system very often encountered in practice includes one or 

more hosts or service platforms that are connected to an IP network (IP = Internet Protocol) via a 
redundant local network LAN (LAN = Local Area Network) and two gateways. 

[0007] The following means of checking message paths for freedom from faults are 

typically used: 
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IP networks (Layer 3 Switching): 

[0008] For the logical protocol level of the IP networks there exist standardized routing 

protocols such as e.g. Open Shortest Path First OSPF, Routing Information Protocol RIP, Border 
Gateway Protocol BGP, by means of which failures of a path can be detected and reported to 
other network elements in order to initiate a switchover to alternate routes. In this case the 
topology of the IP networks plays an insignificant role. The interruption of a message path which 
is connected directly to a network element is usually detected very quickly, e.g. inside 60 ms, 
and the switchover is typically completed after a few seconds, e.g. within I. A s. 

[0009] The interruption of a message path which is not connected directly to the network 

element can only be communicated and detected by means of a routing protocol. In this case the 
switchover times are usually much greater and lie, for example, in the range of 30 s. to .250 s. 

Local area networks LAN (Layer 2 Switching): 

[0010] For the logical protocol level of the LANs there is no standardized procedure for 

detecting faulty message paths especially with redundant configurations with the structure 
referred to. In order to monitor host-LAN-gateway connections, the Spanning Tree Protocol 
SPT can be used, for example. 

[0011] The SPT protocol is very slow-acting, however, i.e. a considerable period of time, 

for example about 30 s, is typically required in order to define a suitable alternate path. For this 
reason efforts are being made to introduce a faster form of SPT, called the Rapid Spanning Tree 
Protocol RSPT, which is described in IEEE Standard 802. Iw. However, the monitoring times for 
RSPT are still in the range of several seconds (default value for bridge hello time = 2 s). 

[0012] For LANs with a ring topology, solutions are known, e.g. Ethernet Automatic 

Protection Switching EAPS or Resilient Packet Ring RPR, by means of which very short 
switchover times, e.g. less than 1 s, are to be achieved. However, all these methods use a LAN 
with ring topology, which is not the case in all application scenarios. 

[0013] Considering the known methods for checking message paths described in the 

foregoing, the following problems result: 

- The known methods require special routing protocols which must be implemented in all 
network elements and/or are limited to specific network topologies. 

- If conventional test methods for message paths are used very frequently, for example by 
means of Internet Control Message Protocol ICMP PING or by means of RIP messages, 
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the respective responder element which handles and responds to the test requirements is 
burdened with a considerable computing load. 
- The switchover times lie outside the tolerance range required for real-time communication. 
Summary of the Invention 

[0014] One embodiment of the present invention specifies a test method for message 

paths in communications networks as well as an improved network element, by means of which 
the disadvantages of the prior art are avoided. 

[0015] One aspect of the present invention is a test method for message paths which can 

advantageously be used if two devices exchange messages of a first protocol layer, for example 
IP packets, via a communications network of a lower protocol layer, for example a LAN, the 
messages exchanged between the devices via the communications network being transmitted 
transparently, i.e. unmodified, through the communications network. According to the invention, 
a device initiating the test method sends test messages of the first protocol layer, e.g. special IP 
packets, at short time intervals, the address of the first protocol layer, e.g. the IP address, of the 
initiating device being selected for such test messages both as the send address and as the receive 
address. It is also possible that the test method is executed by both devices, with the result that 
both (terminal) devices of a communications relationship know the status of the message paths. 

[0016] A major advantage of the invention is that the test messages sent by the first to the 

second device are processed not by the switching processor of the second device, but already by 
the interface unit of the second device. In this way the test messages, which are sent frequently, 
for example every 100 ms, in order to detect faults on message paths as swiftly as possible, are 
prevented from generating processor load in the second device. 

[0017] In a preferred embodiment, in which message paths of a LAN between a host and 

a gateway are tested, there is therefore an important advantage in the fact that the link test 
according to the invention does not lead to an overload situation at the gateway. In conventional 
implementations, PING or route-update messages and RIP messages are used at time intervals of 
30 s to 300 s, as a result of which fast detection of faulty message paths, which is typically 
preferred for voice communication for example, is not possible. The use of the known ICMP 
PING or RIP messages would lead to overload if these messages were to be sent at the high 
frequency mentioned, i.e. several times per second for each message path, when many hosts are 
connected. 
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[0018] By means of a timer it can advantageously be monitored whether the test 

messages were received correctly and within an expected time interval that is in line with the 
expected message transit time in the communications network via the message paths via which 
the test messages were sent. If test messages are not received or are received after the timer has 
elapsed, there is probably a fault on the corresponding message path. So that the loss of 
individual test messages does not lead to the false assumption that there is a general failure of the 
respective message path, the loss of multiple test messages can be used as a criterion for a fault 
on the message path. 

[0019] The information concerning the faults on individual message paths can 

advantageously be used to select the optimal remaining message path in each case. Here, the 
optimal message path can be selected according to the chosen topology of the participating 
networks and taking into account factors such as costs associated with individual message paths 
and number of redundant interfaces or devices present. 

[0020] The invention requires no modifications to be made to components of the 

communications network and can therefore be implemented easily and cheaply. Its realization is 
therefore simple and concerns only the device initiating the test. 

[0021] Also provided according to the invention is a network element comprising means 

for executing this test method. 

[0022] The present invention is also directed to a redundant network arrangement which 

advantageously allows for swift detection of faulty message paths and fast switchover to fault- 
free message paths. 

[0023] The present invention is further directed to a redundant network arrangement 

which can be used with physically very remote network elements. At the same time the network 
arrangement incorporating long-distance or wide-area connections is intended to allow swift 
detection of faulty message paths and fast switchover to fault-free message paths. 

[0024] According to the present invention, a network arrangement for a communications 

network N, which connects a first device Host and a second device GO, is provided, 
- including a first subnetwork No and at least a second subnetwork Ni, 

the first subnetwork (No) consisting of first switching elements Soo, Soi, S02 and the second 
subnetwork Ni consisting of second switching elements S10, Su, Si2, and 
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the first and the second subnetwork being set up independently of each other, 
having at least one crosslink Qj between the subnetworks No, Nj, and 
having at least a first link Loo between the first subnetwork and a first interface IFO of the 
first device Host and at least a second link Lio between the second subnetwork and a 
second interface IF1 of the first device Host and having at least a third link L03 between the 
first subnetwork and the second device GO, 

links L01, L02 between the first switching elements Soo, S01, S02 and/or links Ln, L12 
between the second switching elements S10, Sn, S12 and/or the crosslink(s) Qi being 
implemented as wide area network connections WAN. 

[0025] A major advantage of the invention is to be seen in the fact that when multiple 

devices Host are connected to the second device GO by means of the network arrangement N 
according to the invention, each device Host has two redundant message paths to the second 
device GO via two interfaces IFO, IF1. In this arrangement, one of the message paths runs via the 
crosslink Qi between the two redundant subnetworks, while the other runs within a subnetwork. 

[0026] In a preferred embodiment, in which the message paths are formed by a network 

N between a host and a gateway GO, second gateway Gl can advantageously be used for reasons 
of reliability. This avoids the failure of the default gateway GO leading to isolation of the entire 
network N. 

[0027] In combination with the second gateway Gl , multiple message paths 

advantageously result, said message paths enabling communication between hosts and at least 
one of the gateways GO, Gl even in the event of problems on individual message paths due to 
faulty connections or faulty switching elements. 

[0028] A further advantage is that multiple hosts can communicate with one another by 

means of the crosslink(s) QI between the subnetworks NO and Nl independently of the 
gateways, and furthermore can also do so when different interfaces of the hosts are active. For 
example, a first host with first active interface, connected to the first subnetwork NO, can 
exchange messages with a second host with second active interface, connected to the second 
subnetwork Nl, via the crosslink(s). This would not be possible without the crosslink according 
to the invention. 

[0029] Compared to the solutions in which only local area networks LAN are used in 

order to connect the first device Host and the further devices GO, Gl, the use of wide area 
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networks (WAN) according to one aspect of the invention allows much greater physical 
distances between the devices mentioned. This is of advantage, for example, when one of the 
redundant gateway devices GO, Gl is set up at a remote location, e.g. in order to reduce costs and 
to increase security and/or availability. 

[0030] It is further of advantage that the network arrangement according to the invention 

considerably simplifies the administration of the overall network, since many hosts distributed 
over great areas can be reached from the centrally located gateway devices GO, Gl via only a 
single IP subnetwork. This minimizes the probability of an administration error and increases 
reliability. 

[0031] In order to check the message paths, an advantageous test method for message 

paths in communications networks can be used without modifications, since the long-distance 
(WAN) segments of the communications network forward the frames or packets of the networks 
NO, Nl or N01 , N02, Nl 1 , N12 that are to be transported, transparently and so the end-to-end 
test of the paths between host and gateway(s) GO, Gl is not affected. 

[0032] The invention is explained in greater detail below as an exemplary embodiment 

with reference to three figures. 

Brief Description of the Drawings 

[0033] The invention will be better understood by reference to the Detailed Description 

of the Invention when taken together with the attached drawings, wherein: 

[0034] Figure 1 shows a schematic representation of the connection of a host device to a 

gateway via a redundant network arrangement; 

[0035] Figures 2A and 2B show a schematic representation of the execution sequence of 

a test between a host device and the gateway in a fault-free situation; 

[0036] Figures 3-6 show a schematic representation of the execution sequence of a test in 

various fault situations; 

[0037] Figure 7 shows a schematic representation of the connection of multiple host 

devices to a gateway device via a redundant network; 
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[0038] Figure 8A shows a schematic representation of the redundant connection of a host 

device to a local gateway device and to a remote gateway device by means of a wide area 
network; 

[0039] Figure 8B shows a schematic representation of the redundant connection of a host 

device to remote gateway devices by means of a wide area network; 

[0040] Figure 9A shows a schematic representation of the redundant connection of a host 

device to a local gateway device and to a remote gateway device by means of an Ethernet-over- 
SONET connection; and 

[0041] Figure 9B shows a schematic representation of the redundant connection of a host 

device to remote gateway devices by means of a resilient packet ring. 

Detailed Description 

[0042] With reference to Figure 1 , the following paragraphs first describe an example of 

a redundant network topology for which the present invention can advantageously be used. Here, 
this topology serves to illustrate an exemplary embodiment of the invention, the invention being 
applicable to any topologies. 

[0043] Figure 1 shows a first device Host. This first device may, for example, be one of 

the hosts or service platforms referred to in the introductory remarks. However, the first device 
can be any communications device having L3 communications capabilities. For simplicity, the 
name Host will be used below to designate the first device. 

[0044] The host is connected via a communications network N to a second device GO. 

This second device may, for example, be one of the gateways referred to in the introductory 
remarks. However, the second device can likewise be any communications device having L3 
communications capabilities. For simplicity, the name Gateway will be used below to designate 
the second device. 

[0045] In the preferred exemplary embodiment, the communications network N is a local 

area network LAN which operates e.g. according to the Ethernet standard. Other networks and/or 
protocols can be used for the transparent message transport between host and gateway. 
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[0046] Without special knowledge of the communications network N or its topology, the 

invention is already suitable for testing the message path or message paths via the 
communications network. However, the topology presented below is particularly suitable for use 
with the invention, particularly with regard to the possible alternate message paths in the event of 
a fault. 

[0047] The communications network N is subdivided into two independent subnetworks 

No, Ni. In the simplest case this subdivision is implemented at logical level, but is also 
advantageously carried out physically in order to provide the greatest possible fault tolerance. In 
this scenario, No includes a number of switching components or switches Soo, Soi, S02. Three 
switching components are shown, although this number is purely exemplary and arbitrary from 
the point of view of this invention, in the same way as the structure of the subnetwork No is 
arbitrary, being represented as linear only as an example. 

[0048] The switches Soo, Soi are connected by means of a link L 0 i, this link standing as 

representative of a logical, bidirectional connection between the switches; it can be formed 
physically, for example, by multiple links. In the same way the switches Soi, S02 are connected 
by means of a link L02. 

[0049] Subnetwork Ni includes a number of switching components or switches Sio, Sn, 

S12. Three switching components are shown, although this number is simply an example and 
arbitrary from the viewpoint of this invention, in the same way as the structure of the subnetwork 
No is arbitrary, being represented as linear only by way of example. The switches S10, Sn are 
connected by means of a link Ln, this link standing as representative of a logical, bidirectional 
connection between the switches and can be formed physically, for example, by multiple links. 
In the same way the switches Si 1, S12 are connected by means of a link L12. 

[0050] No is connected to the host via a link Loo- Ni is connected to the host via a link 

L10. Here, the host has two separate interfaces IF0, IF1, a first interface IF0 serving the 
connection to subnetwork N 0 and a second interface IF1 serving the connection to Nj. 

[0051] A link L03 serves to connect subnetwork N 0 to the gateway GO. Depending on the 

type of redundancy topology, subnetwork Ni likewise possesses a connection to gateway GO - 
not shown - and/or, via at least one crosslink Qi, to subnetwork N 0 . Advantageously, this 
crosslink is implemented as closely as possible to the transition point from No to the gateway GO, 
i.e. for example between S02 and S12 as shown in Figure 1. If the crosslink Qi is not disposed 
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directly at the transition from No to the gateway GO, suitable protocols can be used to avoid L2 
loops in connection with the present invention. It is understood that the crosslink Qi may 
physically include multiple links. 

[0052] In an alternative embodiment, a standby gateway Gl - represented by dashes - is 

provided in addition to the gateway GO, for example in case of the failure of the gateway GO. 
Here, the gateways GO, Gl can likewise be connected by means of a crosslink Q2. A link L13 
connects Nj and gateway GL Depending on the type of redundancy topology, No likewise 
possesses a connection to gateway Gl - not shown. 

[0053] The gateways GO, Gl can be prioritized by suitable administration of the routing 

tables. For example, the connection of gateway GO into the further IP network IP can be set up as 
a lower-cost route, and the connection of gateway Gl into the further IP network IP can be set up 
as a higher-cost route. Prioritization is a means of ensuring, in the event of a fault on the 
crosslink Qi, that the host always uses the network (in this case: No) connected to the default 
gateway GO for communication. 

[0054] However, such a prioritization is not required in all cases, for example if the 

crosslink Qi physically includes multiple links - not shown. In this case the prioritization is not 
necessary, since at least one further link is available in the event of the failure of one of these 
links. 

[0055] Based on the network topology presented, the following message paths, for 

example, result; only network-internal paths are considered here: 

Pathl : Host <-> IF0 <-> N 0 <-> GO <-> IP 
Path2: Host <-> IF1 <-> N, <-> Qi <-> S 02 <-> GO <-> IP 
Path3: Host <-> IF0 <-> N 0 <-> Qi <-> S12 <-> Gl <-> IP 
Path4: Host <-> IF1 <-> Ni <-> Gl <-> IP 

[0056] If the mentioned prioritization is provided for the gateways GO, Gl , and if the 

interfaces IF0, IF1 are also prioritized in addition, IF0, for example, having the higher priority, 
the following prioritization of the paths mentioned results, provided the gateway prioritization is 
to take precedence over the interface prioritization: 

Pathl > Path2 > Path3 > Path4 
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[0057] Further message paths are produced in similar fashion if the cited crossover 

connections from N 0 to Gl and Nj to GO are present and/or if further crosslinks or also crossover 
connections exist inside the communications network N between subnetworks No and Nj. 

[0058] Figure 2 shows the communications network N from Figure 1 in a schematic view 

with the test messages transported through the communications network in the fault-free case. 
Here, Figure 2A shows the path taken by the test messages through the communications network 
N. Figure 2B shows a diagram with time sequences, this diagram being greatly idealized in the 
sense that the transit times of the test messages are not considered separately. Moreover, only 
test messages are considered in diagram 2B, but not user data. 

[0059] The message paths are now tested, in that the host sends special test IP datagrams 

via each interface IFO, IFl to each gateway GO, Gl at very short time intervals, e.g. every 
100 ms. The IP address of the respective dedicated interface IFO or IFl is entered as both source 
IP address and as destination IP address. Thus, the test packet is mirrored back to the sending 
interface IFO, IFl of the host by the gateway. 

[0060] The following table shows the IP and MAC addresses to be chosen for testing the 

message paths Pathl..Path4: 





Pathl 


Path2 


Path3 


Path4 


Destination MAC 


GO 


GO 


Gl 


Gl 


Source MAC 


IFO 


IFl 


IFO 


IFl 


Destination IP 


IFO 


IFl 


IFO 


IFl 


Source IP 


IFO 


IFl 


IFO 


IFl 



[0061] Basically, therefore, the layer 2 messages are addressed correctly using the 

respective MAC (MAC = Media Access Control) addresses, whereas the addressing of the higher 
layer 3 messages is modified such that the layer 3 messages are routed back to the sending entity. 
This principle is based on the fact that as a rule layer n messages are not modified during 
transport through a layer n-1 network and that layer n address information is not interpreted by 
the layer n-1 network. 
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[0062] For IP test messages, an important advantage is that only the rt IP forwarding" 

function, which is implemented on the very powerful interface cards of the gateways, is required 
for mirroring or sending back the test messages to the sending entity. Thus, an overload situation 
in the gateway due to the method according to the invention cannot occur, since the switching 
processor of the gateways is not involved in any way in the processing of the test messages. 

[0063] If the test message mirrored at the respective destination is not received again by 

the host within a specific period of time, e.g. 100 ms, there is probably a fault on the 
corresponding message path. This is recorded in a storage buffer for example. In a development 
of the invention, the fault on the message path is only recorded as a permanent fault if the 
following test message associated with this message path is also not received again at the host. In 
a further development, the number of consecutive messages that may be lost per message path 
before this is interpreted as a fault can be adapted to the particular requirements. 

[0064] Alternatively, it is also possible to identify the transmitted test messages by means 

of consecutive numbers or sequence numbers. These are entered in the payload of the test 
messages. The loss of a configurable number of not necessarily sequential test messages can 
also be used as a criterion for failure detection, i.e. the message paths are monitored by 
numbering of the test messages. In this case the counter for lost test messages can be designed 
such that a lost test message increments the counter by 1 and a configurable number of test 
messages received without loss, e.g. 1000, decrements the counter by 1. Alternatively, the 
counter can be decremented upon expiration of a time interval during which no test message loss 
has occurred. If the counter reaches a limit value, the message path is deemed faulty. 

[0065] If the message paths are checked at sufficiently short time intervals with the aid of 

the method according to the invention, every 100 ms in the exemplary embodiment described, 
and if a failed test is repeated precisely once before the corresponding path is deemed faulty, the 
message path will be recognized as faulty after a very short delay, in this case 200 ms, if the 
repeated test fails. 

[0066] With reference to the actual application scenario, it is a straightforward matter for 

the person skilled in the art to adapt the described parameters of the test method according to the 
invention to the particular application. 

[0067] After a fault has been detected and recorded, the user data traffic of the faulty 

message path is redirect to a fault-free message path. The methods for doing this are well- 
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known. However, advantageous strategies for selecting the alternate message path are presented 
below with reference to Figures 3 to 6, where Figures 3 to 6 contain examples of faults on 
message paths. 

[0068] Figure 3 A shows the failure of a switch in subnetwork No that is not connected to 

the crosslink Qi, in this case switch Soi for example. As a result, paths 1 and 3 become faulty. 
Paths 2 and 4 are fault-free. The corresponding signal flow is shown in Figure 3B. Test messages 
are sent to both gateways GO and Gl by interface IFO, which is shown as the active (ACT) 
interface up to that point. The test messages are lost on account of the failure, however. After the 
test fails twice in succession, the fault on Pathl and Path3 is recognized. Test messages are sent 
to both gateways GO and Gl from interface IF1, which is shown as a standby (STB) interface. 
These test messages are received again accordingly. Path2 and Path4 are recognized as fault-free. 
According to the prioritization of the message paths, Path2 is activated as an alternate path by 
switching interface IF1 from STB to ACT. The status "faulty", for example, is recorded for 
interface IFO and, if necessary, an alarm is triggered to alert operating personnel. 

[0069] Figure 4A shows the failure of gateway GO. As a result, paths 1 and 2 become 

faulty. Paths 3 and 4 are fault-free. The corresponding signal flow is shown in Figure 4B. Test 
messages are sent to the default gateway GO by both interfaces IFO, IF1 . The test messages are 
lost on account of the failure, however. After the test fails twice in succession, the fault on Pathl 
and Path2 is recognized. Test messages are sent to the standby gateway Gl by both interfaces 
IFO, IF1. These test messages are received again accordingly. As a result, Path3 and Path4 are 
recognized as fault-free. According to the prioritization of the message paths, Path3 is activated 
as an alternate path by executing a so-called gateway failover (switchover to the standby 
gateway). The status "faulty", for example, is recorded for gateway GO and, if necessary, an 
alarm is triggered to alert operating personnel. 

[0070] Figure 5 A shows the failure of a crosslink Qi between subnetworks No and Ni. As 

a result, paths 2 and 3 become faulty. Paths 1 and 4 are fault-free. The corresponding signal flow 
is shown in Figure 5B. Test messages are sent to gateway Gl by interface IFO, which is shown as 
the active (ACT) interface up to that point. The test messages are lost on account of the failure, 
however. After the test fails twice in succession, the fault on Path3 is recognized. Test messages 
are sent to gateway GO by interface IF1, which is shown as a standby (STB) interface. The test 
messages are lost on account of the failure, however. After the test fails twice in succession, the 
fault on Path2 is recognized. Test messages are sent to gateway GO by interface IFO. These test 
messages are received again accordingly. Pathl is regarded as fault-free. Test messages are sent 
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to gateway Gl by interface IF1. These test messages are received again accordingly. Path4 is 
regarded as fault-free. According to the prioritization of the message paths, Pathl remains active, 
although a message can be sent to notify operating personnel that a fault is present. 

[0071] If Pathl also becomes faulty as a result of a further failure without the fault on 

paths 2 and 3 being rectified, a failover is then made directly to the lowest prioritized path 4. As 
the fault information is always current because of the tests continuing to be run every 100 ms 
even for faulty paths, this failover can be effected without delay, without a failover to paths 2 or 
3 being attempted first. 

[0072] Figure 6A shows the failure of a switch in subnetwork No that is connected to the 

crosslink Qi, in this case switch S02 for example. As a result, paths 1, 2 and 3 become faulty. 
Path 4 is fault-free. The corresponding signal flow is shown in Figure 6B. Test messages are sent 
to both gateways GO and Gl by interface IF0, which is shown as the active (ACT) interface up to 
that point. The test messages are lost on account of the failure, however. After the test fails twice 
in succession, the fault on Pathl and Path3 is recognized. Test messages are sent to gateway GO 
by interface IF1, which is shown as a standby (STB) interface. The test messages are lost on 
account of the failure, however. After the test fails twice in succession, the fault on Path2 is 
recognized. Test messages are sent to gateway Gl by interface IF1 . These test messages are 
received again accordingly. As a result, Path4 is recognized as fault-free. Since Path4 is the only 
remaining path, it is activated as an alternate path by switching interface IF1 from STB to ACT. 
The status "faulty", for example, is recorded for interface IF0 and, if necessary, an alarm is 
triggered to alert operating personnel. A separate alarm that indicates that no further alternate 
message path is present, and that therefore any further failure will lead to total failure, can also 
be triggered. 

[0073] The failover strategy described with reference to Figures 3 to 6 is illustrated in the 

following table. The meaning of the various symbols is as follows: 

"x" Path fault-free 

"0" Status of the path is irrelevant 

Path faulty 
"P1..P4" Pathl. .Path4 
IF-FO Interface failover 
G-FO Gateway failover 
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No FO (IFO active) 
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[0074] Here, a gateway failover means that the host uses a different gateway for sending 

IP packets in the direction of the IP network, whereas interface failover means that the host uses 
a different interface for sending and receiving messages. For "internal" communication, i.e. 
communication between multiple hosts connected to the communications network N - not 
shown, it is preferred that all hosts always have a connection to the same default gateway GO or 
Gl. In this way, host-to-host communication is ensured even in the event of partial failures, for 
example failures of the crosslink path Ql. A failover to the standby gateway Gl is effected only 
if the default gateway GO cannot be reached either via IFO or via IF1, which is also reflected in 
the prioritization of the paths. 

[00751 Although the exemplary embodiment of the invention is described with reference 

to an IP/LAN environment, the invention is not limited to this protocol environment. 
Connection-oriented protocols can, for example, be used for monitoring the host-gateway 
connection if these support a connection setup "to itself, i.e. source address = destination 
address. If an interruption to the connection is detected by the protocol, a failover to a redundant 
transmission path can be initiated. Examples of such protocols are the Real Time Protocol RTP 
or Stream Control Transmission Protocol SCTP. 

[0076] In certain networks it may be necessary for both the first device Host and also the 

second and third devices GO, Gl to know the status of all message paths. In order to achieve this, 
the method according to the invention can be implemented for all devices that need to know the 
status of the message paths. Alternatively, the status can be transmitted by means of status 
messages from one device executing the test method to all other devices. The advantage of the 
present invention is that the test messages initiated by different devices, e.g. multiple hosts, do 
not mutually influence one another. 
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[0077] An exemplary network element Host, for which the method described in the 

foregoing is implemented, comprises, in addition to send-receive devices or interfaces IFO, IF1 to 
the communications network N, for example control logic which converts the described method. 
Control logic of this type also has a device for providing test messages having destination 
addresses and source addresses, e.g. source IP address and destination IP address, which 
correspond to the address of the network element and/or its interfaces. 

[0078] The control logic further comprises devices for monitoring the individual message 

paths. In this case the message paths can be predetermined by operator intervention or 
determined automatically by suitable processes. 

[0079] The control logic establishes on the basis of the criteria already explained in detail 

whether a message path is faulty and initiates the selection and failover to an alternative message 
path according to the failover strategy. For this purpose, the control logic has suitable switchover 
elements, as well as storage elements in which the prioritization of individual message paths is 
stored. 

[0080] Figure 7 shows an embodiment of the invention comprising three host 

components designated Host A, Host B and Host C connected to gateway GO via the 
communications network N. By prioritizing the interfaces IFO, IF1 of all hosts it is achieved that 
all hosts always communicate via the same interface, e.g. IFO, such that a local host-to-host 
communication is possible even in the event that the communication with gateways GO an Gl is 
interrupted. 

[0081] Although multiple crosslinks can be provided between the subnetworks No, Ni, it 

is advantageous to provide only one crosslink Qi at the switches located nearest to the gateways 
GO, Gl . In this way Layer 2 loops and hence the use of a Spanning Tree Protocol SPT can be 
avoided. 

[0082] However, prioritization is not necessary in all cases, for example if the crosslink 

Qi physically includes multiple links - not shown. In this case the prioritization is not required, 
since at least one further connection is available if one of these connections fails. 

[0083] The links L 0 i, L 0 2 and Ln, L\ 2 between the switching elements Soo, S 0 i, S02 and 

S10, Sii, S12 shown in Figures 1 through 7 and also the crosslink Qi are conventionally 
implemented as local connections, as a result of which the networks No and Nj are pure local 
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area networks LANs in one embodiment. On the other hand, physically remote arrangements 
between host device and gateway device(s) can be implemented by configuring all or a selection 
of the mentioned links, e.g. with regard to Layer 1, as long-distance (WAN) connections. 

[0084] This is shown schematically in Figures 8A and 8B. Figure 8A provides a remote 

gateway device GO, which is connected to a host component by means of a local area network 
Noi including the switches S 0 o and Soi as well as the link L 0 i, a schematically represented wide 
area network WAN and a second local area network N02 including the switch S02. Furthermore, 
the crosslink between the subnetworks N02 and Ni is likewise routed through the wide area 
network WAN. With reference to the schematic representation from Figure 7, the links L02 and 
Qi are implemented in Figure 8 A as long-distance (WAN) connections; the connection of the 
optional second, local, gateway Gl is implemented by means of the local area network Ni- 

[0085] In Figure 8B, the host device is connected to two remote gateway devices GO, Gl . 

The redundant connection is achieved on the one hand by means of a local area network N 0 i 
including the switches Soo and Soi and also the link L01 and a local area network N02 including 
switch S02, the local area networks Noi and N02 being connected by means of a wide area 
network WAN, as well as on the other hand by means of a local area network Nj 1 including the 
switches S10 and Sn as well as the link Ln and a local area network N12 including switch S12, the 
local area networks Ni 1 and Nj 2 being connected by means of the wide area network WAN. With 
reference to the schematic representation from Figure 7, the links Lo2, L12 and Qi are 
implemented in Figure 8A as long-distance (WAN) connections. 

[0086] The exemplary embodiments of the connection of a host device to gateway 

device(s) represented schematically in Figure 8 will now be explained in more detail with 
reference to Figures 9 A and 9B. 

[0087] Taking the schematic view from Figure 8A as a basis, Figure 9A shows the case 

of a host device connected to a local gateway Gl and a remote gateway GO. Here, the host device 
is connected to the local gateway Gl by means of a local area network (e.g. LAN) NI . As 
described in connection with Figure 8 A, in Figure 9 A the link L02 and the crosslink QI are 
formed by means of a long-distance (WAN) connection (WAN = Wide Area Network). In the 
example shown in Figure 9A, the WAN is configured as an Ethernet-over-SONET ring. In this 
case four elements, preferably four ADD/DROP multiplexers Ml, M2, M3, M4, are disposed in 
a ring structure, i.e. ring R connects Ml to M2, M2 to M3, M3 to M4 and M4 to Ml, in each 
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case bidirectionally. As a special case, the SONET ring is preferably configured such that point- 
to-point connections are implemented. 

[0088] The message paths represented schematically in Figure 2A can be implemented in 

the exemplary embodiment in Figure 9A, for example as follows: 

Pathl : Host <-> IFO <-> N 0 i <-> Mi <-> M 4 <-> N 02 <-> IP 
Path2: Host <-> IF1 <-> Ni <-> M 2 <-> M 3 <-> N 02 <-> IP 
Path3: Host <-> IFO <-> N 0 i <-> Mi <-> M 2 <-> N, <-> IP 
Path4: Host <-> IF1 <-> N, <-> IP 

[0089] Here, the redundant ring structure permits the configuration of alternate paths. For 

example, if the ring segment between Mi and M 4 fails, this section of Pathl can be alternately 

switched as follows: 

Mi <-> M 2 <-> M 3 <-> M 4 or 

Mi <-> M 2 <-> M 3 <-> N 02 

[0090] In similar fashion, internal alternate paths with regard to the WAN can be 

specified for other failures; methods in this respect are sufficiently known. 

[0091] Taking the schematic view from Figure 8B as a basis, Figure 9B shows the case 

of a host device connected to two remote gateways GO, Gl, gateway Gl being optional. Here, 
the host device is connected to gateway GO by means of a local area network (e.g. LAN) No as 
well as a resilient packet ring RPR conforming to IEEE 802.17 or a comparable WAN ring (e.g. 
Extreme Networks Ethernet Automatic Protection Switching EAPS or Cisco Resilient Packet 
Ring Technology). Link L 02 connects the subnetwork N 0 to the RPR, the latter being represented 
by way of example as including four Ethernet switches (preferably Gigabit Ethernet) Ei, E 2 , E 3 , 
E 4 and a ring connection RPR. The ring RPR connects Ei to E 2 , E 2 to E 3 , E 3 to E 4 and E 4 to Ei, in 
each case bidirectionally. 

[0092] In contrast to the arrangement represented in Figure 8B, in Figure 9B the 

connection between the WAN and the gateways is implemented directly by means of the links 
Lo 3 and Lj 3 , but can also include further elements, as shown in Figure 8B. The crosslink Qi is 
formed by the RPR. Viewed schematically, the RPR in Figure 9B replaces the switches S 02 and 
Sj 2 and also the crosslink Qi from Figure 1. 
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[0093] The connection of the host device to the (optional) gateway Gl is implemented by 

means of a local area network (e.g. LAN) Ni and the RPR. Link L12 connects the subnetwork Nj 
to the RPR. 

[0094] The message paths represented schematically in Figure 2A can be implemented in 

the exemplary embodiment in Figure 9B, for example as follows: 

Pathl : Host <-> IFO <-> N 0 <-> Ei <-> RPR <-> E 4 <-> IP 
Path2: Host <-> IF1 <-> Nj <-> E 2 <-> RPR <-> E 4 <-> IP 
Path3: Host <-> IF1 <-> N 0 <-> Ei <-> RPR <-> E 3 <-> IP 
Path4: Host <-> IFO <-> Ni <-> E 2 <-> RPR <-> E 3 <-> IP 

[0095] How the communications paths run in the RPR in this case depends on the current 

state of the ring itself and is not important for the method described here, since the redundant 
ring structure and the ring protocol ensure the automatic configuration of alternate paths. For 
example, if the ring segment between Ei and E4 fails, this section is alternately switched by the 
ring protocol as follows: Ei <-> E 2 <-> E3 <-> E4. 

[0096] In similar fashion, internal alternate paths with regard to the WAN can be 

specified for other failures; methods in this respect are sufficiently known. 

[0097] The network arrangement according to the invention can advantageously be 

combined with the method for testing the message paths described above. 

[0098] After a fault has been detected and recorded, the user data traffic of the faulty 

message path is redirected to another, fault-free, message path. The methods for doing this are 
well-known. For example, the host sends a "gratuitous ARP", i.e. an ARP request in respect of 
its own IP address. The host uses the interface from which the request originates as the source 
MAC address, and its own IP address as the sought IP address. As a result of the ARP broadcast, 
the ARP caches of all connected hosts and gateways are updated with the MAC/IP address 
relation. The switchover is effected, for example, to the mentioned alternate message paths, 
which are selected according to their prioritization. 

[0099] With SONET and Resilient Packet Ring, the present invention has been described 

for two typical redundant WAN methods. Other WAN methods can, of course, also be applied to 
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the present invention, particularly in connection with the theory outlined in Figures 1, 2 A, 8 A 
and 8B. 

[00100] The above description is presented to enable a person skilled in the art to make 
and use the invention, and is provided in the context of a particular application and its 
requirements. Various modifications to the preferred embodiments will be readily apparent to 
those skilled in the art, and the generic principles defined herein may be applied to other 
embodiments and applications without departing from the spirit and scope of the invention. 
Thus, this invention is not intended to be limited to the embodiments shown, but is to be 
accorded the widest scope consistent with the principles and features disclosed herein. 

[00101] Other embodiments and uses of the invention will be apparent to those skilled in 
the art from consideration of the specification and practice of the invention disclosed herein. All 
references cited herein, including all written publications, all U.S. and foreign patents and patent 
applications, and all published statutes and standards, are specifically and entirely incorporated 
by reference. It is intended that the specification and examples be considered exemplary only 
with the true scope and spirit of the invention indicated by the following claims. 
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